
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json)
Hash identifier: ZyzW6hk14ODCzGq1lOMP1xAAA/1aaVhGuxThHtb+Y9E=
Subject key identifier: 60:F5:4D:13:4D:DE:31:BB:CA:57:5C:14:75:EB:AE:64:CD:A5:C7:D8
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial: 051A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
Manifest number: 0503
Signing time: Sat 04 Apr 2026 23:27:43 +0000
Manifest this update: Sat 04 Apr 2026 23:27:43 +0000
Manifest next update: Sat 11 Apr 2026 23:27:43 +0000
Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: m48wYJVXIsfuJXf1bQ8/cvYXP8Hi1JjLm7Jr6TC6GkE=)
2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: /qXHBT4MA1qmjnYwgB6pugXd54FZZQ+3x08eX/UUmSg=)
3: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: gyHSwtQl6vEkaJUZPDO/MMRfEGWi04eS/Wu0admRoDM=)
4: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: Brlpv06ZI3cq/B6rjsLV19lKDGbhXfmVzTklV/FrQyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1306 (0x51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Validity
Not Before: Apr 4 23:27:43 2026 GMT
Not After : Apr 11 23:27:43 2026 GMT
Subject: CN=69d19e6f-49c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:74:42:6c:9c:c4:31:07:11:88:15:06:f1:
d4:ce:19:c4:5d:d0:55:dd:0c:71:f8:3f:97:29:7f:
89:bd:f8:4c:ce:ae:bb:31:de:44:10:d1:e3:7a:d9:
62:83:7e:a3:9f:39:43:e9:82:97:4d:14:24:84:29:
11:f9:30:20:24:92:2b:c2:27:4e:c8:5d:86:cc:7e:
5d:b0:98:6b:3e:32:26:e5:1f:5c:3b:6d:b3:76:28:
28:61:fa:0c:6c:86:72:b4:a6:c9:d0:ab:ca:96:5b:
cc:43:b4:76:de:f8:9c:de:f0:a9:68:b1:17:d1:37:
79:af:db:49:06:e5:fc:b5:cf:fe:4f:91:46:e2:e2:
66:57:58:63:b1:dc:d5:1b:0d:00:40:b8:9d:5d:8a:
44:8f:26:6d:90:56:c7:ba:74:f7:fa:57:5a:c0:80:
33:3f:21:e5:62:2a:b0:0b:e9:13:5c:f1:3a:c2:19:
cf:83:fb:88:b2:3d:fc:2c:6c:99:b6:78:05:56:4e:
43:e9:f5:8c:b5:15:f5:ea:14:92:a5:54:82:d8:f4:
e0:7b:9b:63:78:1e:0f:bb:46:15:12:a8:23:6a:6a:
09:a5:51:a5:a8:9e:d4:c1:0e:e0:09:ca:95:28:3a:
4e:0b:a3:77:2e:2d:d8:db:1a:f9:6d:c4:5a:37:39:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F5:4D:13:4D:DE:31:BB:CA:57:5C:14:75:EB:AE:64:CD:A5:C7:D8
X509v3 Authority Key Identifier:
keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:01:a6:6d:aa:60:05:3e:a3:3d:fa:e8:1d:42:e4:49:a2:ce:
6d:19:d2:2c:c8:5d:1b:71:81:7b:87:82:cd:ba:2b:6e:6c:ae:
88:b8:47:86:db:55:7b:73:29:31:ae:5d:93:a0:94:90:27:02:
f3:dc:20:30:ff:78:e9:42:c0:72:57:e1:57:57:b4:ce:6f:72:
bb:bb:49:72:53:5c:18:95:4a:cb:71:db:4e:fe:76:d2:a2:89:
ab:b5:9c:46:96:a9:e0:dc:1f:4e:3c:d3:f0:d5:94:21:b1:85:
1d:34:a1:78:82:2e:cf:3d:ac:c0:20:af:a7:d2:0c:25:57:fd:
9b:81:97:51:ef:47:a9:f8:14:fc:e5:c2:ba:07:0d:5c:24:0a:
d9:90:32:a5:c3:08:8a:cd:30:51:eb:51:f9:73:f9:41:3f:fd:
54:81:2e:57:f2:ac:6f:54:d7:26:f3:28:d6:d1:d6:af:69:39:
96:09:c1:1e:d8:17:8b:17:3c:77:b9:eb:78:ef:18:b0:c4:37:
19:1c:75:33:0f:ec:36:fc:bb:45:45:c7:d0:ea:81:27:e5:c0:
27:05:53:bb:3c:61:1e:b7:51:35:29:14:9a:9d:2d:b9:48:cc:
20:a2:6b:6e:67:32:d7:8a:1c:ab:f1:f7:2d:56:7b:35:d0:6d:
c5:c5:09:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD
OERCMTNGNUUwHhcNMjYwNDA0MjMyNzQzWhcNMjYwNDExMjMyNzQzWjAYMRYwFAYD
VQQDEw02OWQxOWU2Zi00OWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA09V0QmycxDEHEYgVBvHUzhnEXdBV3Qxx+D+XKX+JvfhMzq67Md5EENHjetli
g36jnzlD6YKXTRQkhCkR+TAgJJIrwidOyF2GzH5dsJhrPjIm5R9cO22zdigoYfoM
bIZytKbJ0KvKllvMQ7R23vic3vCpaLEX0Td5r9tJBuX8tc/+T5FG4uJmV1hjsdzV
Gw0AQLidXYpEjyZtkFbHunT3+ldawIAzPyHlYiqwC+kTXPE6whnPg/uIsj38LGyZ
tngFVk5D6fWMtRX16hSSpVSC2PTge5tjeB4Pu0YVEqgjamoJpVGlqJ7UwQ7gCcqV
KDpOC6N3Li3Y2xr5bcRaNzkbRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGD1TRNN
3jG7yldcFHXrrmTNpcfYMB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG
OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzE5QS8yNEFCMkMzRTRGOEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVh
NXdUWlBwZFZOaGJJMnhQMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAowGmbapgBT6jPfroHULkSaLObRnSLMhdG3GBe4eCzborbmyuiLhHhttVe3Mp
Ma5dk6CUkCcC89wgMP946ULAclfhV1e0zm9yu7tJclNcGJVKy3HbTv520qKJq7Wc
Rpap4NwfTjzT8NWUIbGFHTSheIIuzz2swCCvp9IMJVf9m4GXUe9HqfgU/OXCugcN
XCQK2ZAypcMIis0wUetR+XP5QT/9VIEuV/Ksb1TXJvMo1tHWr2k5lgnBHtgXixc8
d7nreO8YsMQ3GRx1Mw/sNvy7RUXH0OqBJ+XAJwVTuzxhHrdRNSkUmp0tuUjMIKJr
bmcy14ocq/H3LVZ7NdBtxcUJuQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 03:39:46 2026 by rpki-client